Privacy and your data
Updated
Tune Hustle is operated by Ali Akbar Chevalwala, Ontario, Canada. For privacy questions or requests, email [email protected].
Your account and saved work
Tune Hustle uses Supabase for sign-in and saved business records. Depending on the features you use, these can include your profile, client contact details and notes, sales and payment records, expenses, goals, menus, quotes and saved calculations. This information supports the features you choose to use. Enter only information you need and have permission to use. Keep medical information, passwords and full payment-card details out of notes and messages.
Our primary Supabase project is hosted in the United States (us-east-1). Supabase and other providers may process information outside your country.
If your browser cannot save a privacy choice normally, a necessary fallback cookie may remember that analytics is off for up to one year. It contains no identifier or location. If all privacy storage is blocked, we cannot reliably carry the choice to another page and will ask again when needed.
Your browser stores sign-in information, preferences and some drafts or recovery information. Clearing browser data can remove local drafts and sign you out. It does not delete records saved to your account.
Menus and quote drafts can save on this device and sync to your account while you edit. The save status tells you whether your changes are saved online, saved only on this device, or still need attention.
Optional analytics
We use Cloudflare’s IP-based country and province/state estimate to show privacy settings for your region. Our regional lookup does not save your IP address and does not contact an additional location service. If the country or applicable state cannot be confirmed, the optional switch starts off.
On the site’s listed public pages, Google Analytics starts automatically when our current region check identifies one of the 50 US states, Washington, DC, or one of Canada’s nine provinces outside Quebec. Canadian territories and uncertain locations do not use this automatic default. Account, booking and other private or unknown pages wait for a valid saved or explicit choice. Saved choices and browser privacy signals take priority. Everywhere else, analytics stays off until you choose Accept all or save your preferences with Analytics and performance switched on. When active, Google receives usage events, cookie identifiers and device/network data, including browser details and approximate location. Our custom events use predefined categories instead of names, form contents or entered amounts.
Use Continue without optional cookies when shown in the notice to turn Google Analytics off immediately. In any region, you can open Manage cookie preferences, switch Analytics and performance off and save, or use Turn Google Analytics off at the top of this page. Your choice is saved in this browser. If privacy settings cannot be saved, or your browser sends a supported privacy signal, Google Analytics stays off. Declining does not prevent sign-in or saving your work.
Withdrawing stops future Google Analytics collection through these controls. It does not erase information already sent to Google or delete your account records. Google Analytics is set to retain user-level and event-level data for 14 months. New activity restarts the retention period for your user identifier. This setting does not limit how long standard aggregated reports are available.
Messages and screenshots
When you press Send on the contact form, FormSubmit processes the name, email address, topic, website or brand, message and optional screenshot you provide, then emails them to [email protected] so we can reply.
You may attach one PNG or JPEG up to 5 MB (5,000,000 bytes). The browser checks the file, but those checks do not guarantee server-side validation or malware detection. The original file is sent and may include hidden metadata. Remove client records, health details, payment details, passwords and other sensitive information before sending.
FormSubmit documents a 30-day submission archive. This is separate from copies delivered to our support inbox.
Booking and other connections
The Google booking form loads when you choose to open it. This connects your browser to Google, which receives technical information and the booking information you enter. You can also open the booking page directly on Google. Hiding the embedded form does not cancel an appointment or delete information already sent.
Pages may load fonts from Google Fonts and software libraries from content-delivery networks. Those services receive connection information when your browser requests their resources. The analytics choice does not control these separate connections. Google says information may be processed on servers outside your country; its privacy policy explains its practices.
Your data controls and requests
Your saved account records are separate from this browser’s privacy settings. Hiding a client preserves linked sales and payment history; it does not erase them. The client-list CSV export can include contact details, tags and private notes. Check it before sharing. Feature exports are not a complete account export, and the in-app controls do not provide a complete account-wide deletion process.
For requests to access, correct or delete your information, object to its use, limit use or sharing, or withdraw permission, email [email protected]. Describe the request in general terms and tell us how to reply. We may need enough information to verify that the request concerns your data. Do not send sensitive records or identity documents in your first message.
Preview sites
On preview and local test sites, allowing analytics simulates usage events without sending analytics data to Google. Contact-form submission is blocked there; your message and any selected screenshot stay on the page.